f747d8fcc12dca5ff43e7bbba4107d46c83c66838930bd94489666de08ad01b2 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 03:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b1b0bb5bf79e3fd05ae944fe28904cd0_NEIKI.exe
Size

1.2MB
MD5

b1b0bb5bf79e3fd05ae944fe28904cd0
SHA1

edd761e7d62d8d7507d1446c34a86075f60e6f33
SHA256

f747d8fcc12dca5ff43e7bbba4107d46c83c66838930bd94489666de08ad01b2
SHA512

234d0f091db3e30171772b353c10fe51fba88edde8933304a60801e54134f22df5484cf159d1f2195c4379d270f403e76b5f0dfc915ca244165c45e8bfe35686
SSDEEP

24576:PLhhM3JAubJJrRjmH6M/JPmhv2XVHcWlO33qyDeoyEqRvOWfoqEBq:ThhINNJwl/JJXV/lw3tHyE6WW9E

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b1b0bb5bf79e3fd05ae944fe28904cd0_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\b1b0bb5bf79e3fd05ae944fe28904cd0_NEIKI.exe"
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-0-0x0000000000400000-0x0000000000535F9C-memory.dmp

Filesize
1.2MB

Download